$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: XNGCETRAE3or3CBCLpskAq40Ueab0WRfTLqM0GMDEh4= Subject key identifier: 50:62:4D:3C:5F:AD:A2:29:92:3B:45:BD:3B:6C:A1:A7:CB:0E:CE:F5 Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 17B98CBA058A169131942F13E18B72AC49FC33C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 0156 Signing time: Fri 06 Jun 2025 17:21:53 +0000 Manifest this update: Fri 06 Jun 2025 17:16:53 +0000 Manifest next update: Mon 09 Jun 2025 21:56:53 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: 6zTN+Th/LbjPV6M9U942g3/VgPwVhMClRAfn09G1r28=) 2: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b9:8c:ba:05:8a:16:91:31:94:2f:13:e1:8b:72:ac:49:fc:33:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Jun 6 17:16:53 2025 GMT Not After : Jun 9 21:56:53 2025 GMT Subject: CN=50624D3C5FADA229923B45BD3B6CA1A7CB0ECEF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:30:e6:da:67:3e:72:63:85:8d:6b:6d:7e:f1: cb:e9:7b:e3:d6:51:52:d0:26:2b:76:1b:98:3b:d5: 75:59:1a:18:7d:1c:6f:0b:0e:4a:2d:14:25:95:6b: 25:49:7d:76:5e:00:89:86:a6:aa:74:cc:31:85:84: 0a:b4:e3:f9:40:70:ce:a4:7c:45:f8:da:9e:92:d1: 4f:a6:2a:59:b3:c5:f8:ec:35:3b:b1:07:62:2f:18: 8b:16:4e:f5:e6:42:60:5b:8b:6f:6e:25:a7:87:c8: ec:61:0c:7d:6a:82:a6:b0:49:80:15:6d:cd:4e:e9: 42:ac:5e:a9:73:88:d4:a8:b5:83:3c:64:71:15:0a: 86:c1:1b:37:a2:6d:b4:44:8b:76:93:22:ec:fd:0e: 22:0c:8e:bb:f9:b7:8c:88:90:f4:d5:39:9a:ab:31: 29:ab:ba:a5:88:86:a2:f2:c7:f0:ae:fa:f9:c5:68: 63:fa:c9:2a:1a:f3:50:85:e9:55:3e:b6:7b:d2:22: 48:02:c0:5f:07:a6:02:15:06:76:5e:a3:a2:a0:99: 69:0d:79:7b:c7:63:36:f6:2b:7e:69:46:0d:87:7a: d4:0b:6c:8e:5f:a2:ab:2e:34:01:3a:93:56:c0:82: 15:b2:ef:fc:75:2a:47:c9:fe:c5:eb:e6:8b:bb:dc: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:62:4D:3C:5F:AD:A2:29:92:3B:45:BD:3B:6C:A1:A7:CB:0E:CE:F5 X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d3:ad:92:a2:15:d9:3f:ce:0d:cd:57:f0:dc:85:2b:4a:46: 17:17:5b:0a:4a:06:a4:2b:ed:3d:a0:21:04:42:69:d0:6b:5b: 17:e2:58:d8:f9:6a:a0:a4:d6:24:eb:77:7d:95:e0:76:e3:bc: 25:2b:0a:fa:3b:f6:a7:47:f1:7d:0c:26:d7:a4:04:1a:4b:78: 97:a4:dc:c5:a6:97:c1:f2:cc:f2:3a:77:fd:e5:1e:ac:ed:bd: bf:43:b2:5c:4b:6c:49:3b:7e:4d:ed:b9:c3:01:16:84:ee:3f: ef:77:66:b8:b7:a9:f9:7e:ac:b6:b1:e8:ec:1b:04:05:f2:2a: b2:cd:58:8e:b9:b3:65:69:88:6a:38:fe:8b:de:08:6b:fe:e0: 87:7d:a4:73:73:c0:00:0e:67:f1:cd:15:85:bf:b2:9b:ec:5e: 6f:8e:77:e3:49:60:53:c7:d1:4b:a6:a2:cf:a1:68:34:f5:5b: 66:de:d3:9b:85:2a:8a:20:20:e7:a6:ea:6d:72:04:b0:9c:7b: 41:a8:aa:54:d2:90:90:c5:06:0e:f7:3a:34:75:0c:f3:51:65: 2c:1a:a2:a9:42:bb:7f:40:8a:28:1e:ca:5c:6f:dc:98:cb:bb: ea:00:a2:1c:59:64:f7:52:36:31:88:9c:83:fa:a6:23:8b:0d: 13:d2:f1:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF7mMugWKFpExlC8T4YtyrEn8M8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTA2MDYxNzE2NTNaFw0yNTA2MDkyMTU2NTNaMDMxMTAvBgNV BAMTKDUwNjI0RDNDNUZBREEyMjk5MjNCNDVCRDNCNkNBMUE3Q0IwRUNFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnMObaZz5yY4WNa21+8cvpe+PW UVLQJit2G5g71XVZGhh9HG8LDkotFCWVayVJfXZeAImGpqp0zDGFhAq04/lAcM6k fEX42p6S0U+mKlmzxfjsNTuxB2IvGIsWTvXmQmBbi29uJaeHyOxhDH1qgqawSYAV bc1O6UKsXqlziNSotYM8ZHEVCobBGzeibbREi3aTIuz9DiIMjrv5t4yIkPTVOZqr MSmruqWIhqLyx/Cu+vnFaGP6ySoa81CF6VU+tnvSIkgCwF8HpgIVBnZeo6KgmWkN eXvHYzb2K35pRg2HetQLbI5foqsuNAE6k1bAghWy7/x1KkfJ/sXr5ou73MwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUGJNPF+toimSO0W9O2yhp8sOzvUwHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfTrZKiFdk/zg3NV/DchStKRhcXWwpKBqQr 7T2gIQRCadBrWxfiWNj5aqCk1iTrd32V4HbjvCUrCvo79qdH8X0MJtekBBpLeJek 3MWml8HyzPI6d/3lHqztvb9DslxLbEk7fk3tucMBFoTuP+93Zri3qfl+rLax6Owb BAXyKrLNWI65s2VpiGo4/oveCGv+4Id9pHNzwAAOZ/HNFYW/spvsXm+Od+NJYFPH 0Uumos+haDT1W2be05uFKoogIOem6m1yBLCce0GoqlTSkJDFBg73OjR1DPNRZSwa oqlCu39Aiigeylxv3JjLu+oAohxZZPdSNjGInIP6piOLDRPS8QA= -----END CERTIFICATE-----Generated at Sun Jun 8 04:05:39 2025 by rpki-client